Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/GMddGlwOUgIDge3f8eQvwQ1gYQ0.roa
File: GMddGlwOUgIDge3f8eQvwQ1gYQ0.roa (raw, json)
Hash identifier: QAV4lTR4VFMsoAaetMGZqb1bPsXXa7Ze2H+bxF4CIzY=
Subject key identifier: 18:C7:5D:1A:5C:0E:52:02:03:81:ED:DF:F1:E4:2F:C1:0D:60:61:0D
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 0198B4E9495664F0F96A96339CD9C0026CFF
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/GMddGlwOUgIDge3f8eQvwQ1gYQ0.roa
Signing time: Sat 16 Aug 2025 22:04:04 +0000
ROA not before: Sat 16 Aug 2025 22:04:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209823
IP address blocks: 195.24.245.0/24 maxlen: 24
2a12:5541:1::/48 maxlen: 48
2a12:5541:2::/48 maxlen: 48
2a12:5541:a::/48 maxlen: 48
2a12:5541:100::/48 maxlen: 48
2a12:5541:200::/48 maxlen: 48
2a12:5541:331::/48 maxlen: 48
2a12:5542::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:e9:49:56:64:f0:f9:6a:96:33:9c:d9:c0:02:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Aug 16 22:04:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c75d1a5c0e52020381eddff1e42fc10d60610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2d:04:77:2c:44:72:a2:7c:4b:3e:5d:db:66:
2e:9d:0a:b6:70:8e:a8:de:e3:d6:93:9c:34:b3:73:
75:04:2f:16:1e:0b:57:74:89:9e:73:1f:2d:60:b9:
dc:99:79:7e:1f:3c:9c:d2:13:f9:43:11:71:0b:16:
0b:5c:3f:50:ef:33:df:da:fd:e8:70:14:aa:46:90:
10:b2:4f:f1:e9:12:74:2d:dd:41:aa:26:59:14:48:
c7:bc:4c:f1:70:ab:cc:ed:dd:c5:9d:b9:f5:35:82:
f8:01:4a:ca:c9:41:9a:ee:a2:e9:9c:b1:cc:db:e6:
d7:41:e9:03:9a:1f:c6:a2:73:5d:c7:b8:2e:07:9a:
f0:87:f5:fa:1c:9b:d3:22:76:b6:c6:0e:be:25:7d:
be:51:ef:91:33:f5:95:0c:fa:a9:61:e5:fe:b3:a9:
64:d0:8c:f0:01:d8:d3:4e:15:9b:ae:57:3a:e9:c1:
b0:9e:62:9e:e9:98:88:82:3c:f6:89:71:ad:82:48:
ae:2f:2a:7a:aa:86:d7:98:73:a6:b8:73:20:b2:dd:
b3:60:95:67:d6:e1:c0:01:a0:35:c0:95:2b:7d:06:
cd:45:ef:66:64:c1:40:bb:2e:85:87:c1:13:01:87:
df:42:70:c4:a7:e5:e2:cd:de:f8:d5:ff:b7:14:e9:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:5D:1A:5C:0E:52:02:03:81:ED:DF:F1:E4:2F:C1:0D:60:61:0D
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/GMddGlwOUgIDge3f8eQvwQ1gYQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5541:1::-2a12:5541:2:ffff:ffff:ffff:ffff:ffff
2a12:5541:a::/48
2a12:5541:100::/48
2a12:5541:200::/48
2a12:5541:331::/48
2a12:5542::/32
Signature Algorithm: sha256WithRSAEncryption
3e:78:f0:b7:2d:14:32:e2:33:e6:e0:f7:41:b1:fd:62:fa:e0:
c0:bf:2f:04:73:05:f0:70:fa:35:e4:ce:1a:a3:70:66:64:7e:
e4:09:2c:35:70:74:d0:5e:38:aa:29:da:3a:4d:5c:e1:43:bd:
d1:6a:d2:d4:80:34:d2:75:54:44:ae:2a:de:b4:60:17:39:70:
4a:ae:e9:ca:2c:89:6e:18:7a:33:e7:98:d5:b9:50:29:17:2a:
22:09:03:3e:7b:f1:57:1d:e3:c9:28:4b:c0:a7:54:a4:4d:c8:
8e:17:e3:34:3a:d7:45:c5:c3:8c:c8:e8:14:1e:00:b9:f4:79:
2b:63:3c:c4:1f:d1:6b:c1:b2:cf:e6:da:06:fd:40:d2:2a:f8:
e3:c5:9b:e6:c0:aa:c3:60:17:fb:93:57:80:ea:9d:89:35:5b:
c6:71:1c:a2:74:d5:b3:18:01:e4:9a:db:e7:c1:9a:64:91:04:
02:9b:40:16:b0:49:51:72:1a:ff:06:a7:37:9c:d6:94:11:b7:
05:f9:54:28:bf:9e:57:f2:1a:97:e1:93:42:28:8d:32:ad:04:
e2:fa:fe:62:e4:61:5a:5f:30:86:07:ac:b9:51:14:bc:c7:3a:
7b:75:03:40:79:b9:9a:8f:bf:d7:31:6d:9b:c7:30:0c:e1:08:
d5:17:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:20 2025 by rpki-client